Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: VkPbkvYo9iyAyvMzi6BW/R62nEonMtG74VAm1zW0TRU=
Subject key identifier: C2:FA:14:DB:5A:05:4E:99:7C:AB:14:05:0F:5C:E2:65:64:9E:E6:02
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 01A12F57FAFD0A7ED7DF9F2082029B038B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 12AC
Signing time: Mon 12 Oct 2026 09:00:57 +0000
Manifest this update: Mon 12 Oct 2026 09:00:57 +0000
Manifest next update: Tue 13 Oct 2026 09:00:57 +0000
Files and hashes: 1: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: PMfpWNfN6TFhnAoXtLaem6FviWI68ZfCVThZPZ71jt8=)
2: e4Y82jz5m9Po29WmrpJsedcmzmk.roa (hash: uEEEYOKhA29NBvJQq3WwP47mr+GKJzQ+1OrC0QbpDj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:57:fa:fd:0a:7e:d7:df:9f:20:82:02:9b:03:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Oct 12 09:00:57 2026 GMT
Not After : Oct 13 09:00:57 2026 GMT
Subject: CN=c2fa14db5a054e997cab14050f5ce265649ee602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:52:8b:06:1e:00:65:56:56:e2:9d:dc:c2:
ca:bc:cd:ea:df:79:8e:ee:5d:7e:cf:6f:5e:de:3a:
ea:72:51:6f:0a:b0:da:4f:5b:73:5e:4f:37:68:19:
5e:88:44:67:af:02:d7:22:68:c8:d4:9d:a5:cc:af:
0e:06:e7:2e:b5:fb:2b:17:f3:bc:87:92:96:48:80:
c8:f2:55:b6:55:47:84:1d:66:be:bc:5f:06:e2:14:
45:97:59:b2:5f:d4:2b:7f:95:fe:9c:c8:3d:eb:69:
fa:4c:a3:66:38:a5:d7:c7:ca:aa:66:ad:ef:9e:6b:
62:ae:5a:95:6b:87:e0:f6:86:e9:4a:d4:2f:a3:aa:
12:1d:8d:e9:0a:c1:86:5c:d2:6c:7e:3f:83:dd:ef:
c9:9f:19:db:c5:76:1a:13:cf:c0:ae:ef:a7:e7:87:
d2:88:03:6c:79:8d:69:17:0a:ed:21:0e:05:52:01:
e0:90:72:98:16:5e:73:81:4b:7e:8c:af:5a:a6:fa:
d0:c2:9c:90:a5:93:5d:20:b1:c1:b2:08:88:0b:88:
ba:30:8e:c7:2c:96:aa:7d:15:c2:6a:47:9f:50:9a:
d9:48:37:c1:b7:a5:32:a7:9c:1d:c0:52:63:7c:1e:
7c:06:07:ed:87:d2:26:9a:31:95:b0:18:40:e3:fd:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:14:DB:5A:05:4E:99:7C:AB:14:05:0F:5C:E2:65:64:9E:E6:02
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:8d:d9:1e:ba:f0:44:ee:18:17:99:11:de:a4:9f:f2:33:
09:44:af:86:62:d4:86:20:f6:df:13:39:7e:e4:da:c1:ab:af:
10:47:e2:e1:ad:cb:dc:1e:ac:0b:83:0d:3b:2c:dd:e1:7f:05:
ed:8e:96:29:9e:a5:ee:01:02:51:cb:3d:0b:55:b0:23:bc:74:
60:3e:f8:e4:1a:d9:36:d6:51:5c:05:47:ed:0e:c5:98:61:6f:
0b:08:f7:6b:a7:a2:3d:b9:19:51:dc:4b:ed:ab:24:a7:73:e5:
37:b0:cd:74:d1:8f:24:77:4c:29:06:fb:43:71:c2:86:2e:4e:
1f:ee:f7:28:61:2d:78:79:b4:64:5f:ce:80:d9:f2:3a:0c:1a:
0e:ef:14:fc:86:aa:0e:c5:55:ab:8d:af:30:d8:a2:a6:ee:e8:
e0:64:b3:99:94:c6:77:c9:f4:66:d4:65:a7:ce:1c:68:94:c5:
b4:69:ac:65:e1:a0:16:fa:1a:bf:91:da:e3:bf:1d:77:a4:0f:
75:f6:40:8c:b3:dc:cf:dc:73:66:94:35:47:6a:3d:e9:f9:d4:
2b:07:43:22:6e:e2:14:c4:5b:c6:b6:48:cd:b4:e7:60:ec:d6:
60:6b:c3:78:37:a6:ff:db:72:bd:ae:7a:25:5d:f3:5b:fe:aa:
e5:ab:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:15:32 2026 by rpki-client